Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/a25f89-639b-4f9e-ac9d-7d928c131724/1/8H-pjVIdhMKNrsion3SIu86AAhU.mft
File: 8H-pjVIdhMKNrsion3SIu86AAhU.mft (raw, json)
Hash identifier: Oi2urH8oCoy1PcPkZbtSF+JNjVK7uyVRYqFS6eHvj4U=
Subject key identifier: 06:A5:7C:31:A8:E1:66:56:4C:B7:91:F2:D1:95:75:7E:0A:4F:54:43
Authority key identifier: F0:7F:A9:8D:52:1D:84:C2:8D:AE:C8:A8:9F:74:88:BB:CE:80:02:15
Certificate issuer: /CN=f07fa98d521d84c28daec8a89f7488bbce800215
Certificate serial: 019D27E0598259AFA5898158245BEFEE91E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8H-pjVIdhMKNrsion3SIu86AAhU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/a25f89-639b-4f9e-ac9d-7d928c131724/1/8H-pjVIdhMKNrsion3SIu86AAhU.mft
Manifest number: 04AA
Signing time: Thu 26 Mar 2026 02:01:47 +0000
Manifest this update: Thu 26 Mar 2026 02:01:47 +0000
Manifest next update: Fri 27 Mar 2026 02:01:47 +0000
Files and hashes: 1: 8H-pjVIdhMKNrsion3SIu86AAhU.crl (hash: MPjEF1HlsIVDzCPAGQaK0O8p+SPRWBj/IaO0vab3D4s=)
2: 8_gr7ArTRAbIwtF4BAs2Yb1Q5X8.roa (hash: mNo3tCakCblgrlbHW+icbibgZLAMJGmCUvTiUz7GkBc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/a25f89-639b-4f9e-ac9d-7d928c131724/1/8H-pjVIdhMKNrsion3SIu86AAhU.crl
rsync://rpki.ripe.net/repository/DEFAULT/95/a25f89-639b-4f9e-ac9d-7d928c131724/1/8H-pjVIdhMKNrsion3SIu86AAhU.mft
rsync://rpki.ripe.net/repository/DEFAULT/8H-pjVIdhMKNrsion3SIu86AAhU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 02:01:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:e0:59:82:59:af:a5:89:81:58:24:5b:ef:ee:91:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f07fa98d521d84c28daec8a89f7488bbce800215
Validity
Not Before: Mar 26 02:01:47 2026 GMT
Not After : Mar 27 02:01:47 2026 GMT
Subject: CN=06a57c31a8e166564cb791f2d195757e0a4f5443
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:10:30:94:7f:07:75:81:ec:69:73:91:11:a3:
30:0f:4e:d9:8f:58:83:e1:f6:bb:4a:d6:a6:15:a3:
7a:a3:fe:ff:77:0e:c5:7c:94:01:a3:e6:e5:14:d4:
0b:55:dc:0f:13:e4:c3:75:8a:68:61:c3:95:16:80:
55:65:be:31:2a:22:c5:f7:8d:4c:1b:35:cf:25:a0:
02:6e:33:27:5f:99:ed:62:e1:b2:40:b2:c8:b3:3e:
4e:77:a7:61:61:e1:0d:5a:8e:b6:5a:59:e0:97:32:
c0:7e:1d:8d:83:12:cb:4a:6f:a1:bb:f5:9a:9e:30:
22:de:3b:eb:76:6a:91:5b:a8:a4:20:71:a4:cf:6a:
21:73:09:63:95:f9:a2:94:4c:4e:06:08:41:90:70:
7b:bb:f4:91:2b:7e:1e:11:7a:53:d7:1f:56:d3:39:
24:52:48:4b:10:ac:99:84:5f:39:38:b0:b1:35:c3:
4e:68:71:86:bf:cb:63:29:17:52:ce:0d:f4:c0:72:
9c:64:18:78:5c:d9:f7:52:f1:4f:8c:99:2a:00:54:
d8:01:f7:be:86:dc:fb:d8:8d:0b:35:23:56:e6:6b:
e4:7b:71:2c:ff:16:e3:ab:bc:da:d0:ec:0f:23:82:
bb:9c:37:76:04:2d:cf:05:65:8b:c2:3b:b7:6b:03:
5e:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:A5:7C:31:A8:E1:66:56:4C:B7:91:F2:D1:95:75:7E:0A:4F:54:43
X509v3 Authority Key Identifier:
keyid:F0:7F:A9:8D:52:1D:84:C2:8D:AE:C8:A8:9F:74:88:BB:CE:80:02:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8H-pjVIdhMKNrsion3SIu86AAhU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/a25f89-639b-4f9e-ac9d-7d928c131724/1/8H-pjVIdhMKNrsion3SIu86AAhU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/a25f89-639b-4f9e-ac9d-7d928c131724/1/8H-pjVIdhMKNrsion3SIu86AAhU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:22:2d:e4:f8:ca:8b:f9:ca:c4:5c:4c:21:43:78:29:56:d4:
09:b8:21:a2:40:ff:9b:e4:ae:f1:76:0f:fc:90:86:15:34:a5:
09:b1:68:64:d6:93:eb:f1:f2:e5:d3:4c:a6:d6:61:91:87:ab:
02:2c:19:9f:2f:6b:74:44:c2:42:1c:3b:a0:fe:4b:a2:28:23:
59:72:ff:c0:0d:cd:e6:d2:b0:e1:3f:43:16:45:13:2c:b3:9d:
b0:7b:4e:79:e0:b9:78:9b:ad:f2:89:d2:a1:e6:7c:81:de:d1:
68:1f:e8:0b:d7:29:bb:fa:4a:42:f6:15:6f:7d:9f:3b:80:1f:
b7:71:9b:96:d4:09:95:e5:8e:eb:98:79:1d:ef:f4:8a:a4:e7:
78:12:41:d9:ea:51:d9:04:0d:0b:12:48:d9:f6:29:51:40:bc:
8f:31:61:60:05:db:bd:db:da:7c:9b:19:cd:21:61:f1:b1:96:
b0:ea:13:5a:94:c9:d0:2a:fa:bc:70:2f:87:eb:54:52:62:95:
0f:a8:52:6c:ee:05:ee:a6:1c:4f:ab:5c:b2:b1:bc:db:03:90:
29:39:d3:db:c9:cb:72:23:67:7f:ec:d2:ab:2b:ba:a1:67:04:
b6:66:64:c5:0d:a0:1a:f1:55:14:48:be:52:ef:86:c8:2b:bf:
a1:1a:c6:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 14:16:35 2026 by rpki-client